Super Admin - Revision history

Dlim at 22:35, 4 February 2020

2020-02-04T22:35:24Z

Dlim: /* Super Admins must have a separate account for daily use */

2020-02-04T02:45:37Z

Super Admins must have a separate account for daily use

Dlim: /* Super Admins must have a separate account for daily use */

2020-02-04T02:40:32Z

Super Admins must have a separate account for daily use

Dlim at 02:40, 4 February 2020

2020-02-04T02:40:18Z

Dlim at 02:28, 4 February 2020

2020-02-04T02:28:46Z

Dlim: /* Set roles with specific permissions for specific scenarios */

2020-02-04T02:28:19Z

Set roles with specific permissions for specific scenarios

Dlim at 02:22, 4 February 2020

2020-02-04T02:22:51Z

Dlim at 02:20, 4 February 2020

2020-02-04T02:20:06Z

Dlim at 02:18, 4 February 2020

2020-02-04T02:18:48Z

Jrobertson at 03:39, 16 May 2018

2018-05-16T03:39:59Z

@@ Line 1: / Line 1: @@
 ==Super Admin==
 Super Admin is a special role in Admin role. Super Admin has full permissions for all users and features within the dashboard.
 Some best practices for using/giving Super Admin privileges:

@@ Line 18: / Line 18: @@
 ===Super Admins must have a separate account for daily use===
 Since Super Admin accounts must not be used for daily use, a Non-Super Admin account should be created for daily use.
 This limits the risk of accidental changes that may occur with daily use of an administrator account.
 ===Give to limited users===

@@ Line 17: / Line 17: @@
 ===Super Admins must have a separate account for daily use===
-Since Super Admin accounts should not be used for daily use, a Non-Super Admin account should be created for daily use.
+Since Super Admin accounts must not be used for daily use, a Non-Super Admin account should be created for daily use.
 This limits the risk of accidental changes that may occur with daily use of an administrator account.

@@ Line 11: / Line 11: @@
 *Set roles with specific permissions for specific scenarios
-===Do not use for daily use===
+===Do not use Super Admin for daily use===
 Super Admin accounts should not be used for daily use, Super Admin accounts should only be used when specific task requiring Super Admin privileges are required.
 This is to reduce the risk of accidental changes that may occur with daily usage of an administrator account.
-===Super Admins should have a separate account for daily use===
+===Super Admins must have a separate account for daily use===
 Since Super Admin accounts should not be used for daily use, a Non-Super Admin account should be created for daily use.

@@ Line 1: / Line 1: @@
 ==Super Admin==
 Super Admin is a special role in Admin role. Super Admin has full permissions for all users and features within the dashboard.
 The use of Super Admin should be used or given with careful consideration.
@@ Line 12: / Line 13: @@
 ===Do not use for daily use===
 Super Admin accounts should not be used for daily use, Super Admin accounts should only be used when specific task requiring Super Admin privileges are required.
 This is to reduce the risk of accidental changes that may occur with daily usage of an administrator account.
 ===Super Admins should have a separate account for daily use===
 Since Super Admin accounts should not be used for daily use, a Non-Super Admin account should be created for daily use.
 This limits the risk of accidental changes that may occur with daily use of an administrator account.
 ===Give to limited users===
 Due to the nature of the Super Admin role, it is best to give the Super Admin privileges to a select few users.
 This reduces the number of potential breaches for your school's dashboard.
 ===Must have MFA enabled for users with Super Admin role===
 Since having a compromised Super Admin account would leave your entire school's dashboard vulnerable.
 To reduce the risk of having a Super Admin account compromised, having MFA enabled adds an extra layer of security for the Super Admin account.
 ===Set roles with specific permissions for specific scenarios===
-To limit the use of Super Admin privilege, it is best to create roles that do a specific task. Such as specific role that only allows for the creation of users.
+To limit the use of Super Admin privilege, it is best to create roles that do a specific task.
 This limits the chances of users making unauthorised changes.
 [[Category:Admin Roles]]

← Older revision		Revision as of 02:28, 4 February 2020
Line 29:		Line 29:
	To limit the use of Super Admin privilege, it is best to create roles that do a specific task. Such as specific role that only allows for the creation of users.		To limit the use of Super Admin privilege, it is best to create roles that do a specific task. Such as specific role that only allows for the creation of users.

		+	This limits the chances of users making unauthorised changes.

	[[Category:Admin Roles]]		[[Category:Admin Roles]]

← Older revision		Revision as of 02:18, 4 February 2020
Line 1:		Line 1:
−	Super ~~Admins have~~ full permissions ~~on every feature~~ within the ~~Dashboard~~. ~~Organisational unit restrictions on granted permissions do~~ not ~~apply~~ to ~~this~~ role. This role ~~overrides all other roles~~, ~~members~~ of ~~super admin~~ have ~~access to everything regardless~~ of ~~what other roles are in place~~	+	==Super Admin==
		+	Super Admin is a special role in Admin role. Super Admin has full permissions for all users and features within the dashboard.
		+	The use of Super Admin should not be used or given without careful consideration.
		+
		+	Some best practices for using/giving Super Admin privileges:
		+	*Do not use Super Admin for daily use
		+	*Super Admins must have a separate account for daily use
		+	*Give to limited users
		+	*Must have MFA enabled for users with Super Admin role
		+
		+	===Do not use for daily use===
		+	Super Admin accounts should not be used for daily use, Super Admin accounts should only be used when specific task requiring Super Admin privileges are required.
		+	This is to reduce the risk of accidental changes that may occur with daily usage of an administrator account.
		+
		+	===Super Admins should have a separate account for daily use===
		+	Since Super Admin accounts should not be used for daily use, a Non-Super Admin account should be created for daily use.
		+	This limits the risk of accidental changes that may occur with daily use of an administrator account.
		+
		+	===Give to limited users===
		+	Due to the nature of the Super Admin role, it is best to give the Super Admin privileges to a select few users.
		+	This reduces the number of potential breaches for your school's dashboard.
		+
		+	===Must have MFA enabled for users with Super Admin role===
		+	Since having a compromised Super Admin account would leave your entire school's dashboard vulnerable.
		+	To reduce the risk of having a Super Admin account compromised, having MFA enabled adds an extra layer of security for the Super Admin account.
		+

	[[Category:Admin Roles]]		[[Category:Admin Roles]]

← Older revision		Revision as of 03:39, 16 May 2018
Line 1:		Line 1:
−	Super Admins have full permissions on every feature within the Dashboard. Organisational unit restrictions on granted permissions do not apply to this role.	+	Super Admins have full permissions on every feature within the Dashboard. Organisational unit restrictions on granted permissions do not apply to this role. This role overrides all other roles, members of super admin have access to everything regardless of what other roles are in place
−
−	~~;Examples~~ of ~~permissions that Super Admins~~ have ~~include:~~
−
−	*Editing, creating, uploading and deleting various groups and users
−
−	*Editing, creating and deleting Organisational units and sync profiles
−
−	*Editing, creating and deleting services
−
−	*Editing the various themes within the dashboard
−

	[[Category:Admin Roles]]		[[Category:Admin Roles]]